FIRMWARE RELEASE NOTE ======================== Products affected: Q6075 Release date: 2021-10-08 Release type: Production Firmware version: 10.7.3 Preceding release: 10.7.1 -------------------------------------------------------------------------------- Upgrade recommendations ======================== When updating the device, it is recommended to do an intermediate upgrade using an available AXIS OS LTS-release on the way to the desired AXIS OS version. For example, if the device currently is running AXIS OS 7.40 and you want to upgrade to the latest AXIS OS Active Track (Example: 10.1, October 2020) then you should do the upgrade in these steps: 7.40 => 8.40 LTS => 9.80 LTS => 10.1. More detailed recommendations can be found in the AXIS OS portal at https://www.axis.com/support/firmware. Upgrade the firmware according to the instructions given in howtoupgrade.txt, which is included in the firmware folder or according to instructions at https://www.axis.com/support/firmware. NOTE ======================== For latest information about Axis Cybersecurity, see: https://www.axis.com/support/product-security New features in 10.7.3 ================================================================================ 10.7.3:F1 Axis Object Analytics 1.0.30 is preinstalled. - Corrected an issue with the stream in the configuration web page. Features in 10.7.1 ================================================================================ 10.7.0:F1 ACAPs containing a manifest.json file are now fully supported. The manifest.json file contains settings and parameters for the application. The older package.conf file is still supported. 10.7.0:F2 Axis Object Analytics 1.0.28 is preinstalled. 10.7.0:F3 Added support for .ogg and .opus encoded mediaclips. 10.7.0:F4 Net-SNMP is now the new SNMP backend for AXIS OS devices and will replace the legacy SNMP backend that was used previously. Net-SNMP provides significant higher security mechanism and authentication for SNMPv3 than previously could be provided. 10.7.0:F5 Added support for MQTT subscription. With this support, it will be possible to use incoming MQTT messages as action triggers in the rule engine of the new preview web GUI. 10.7.0:F6 Added support for a new parameter, "root.SNMP.NTCIP.Enabled", that can be used to enable NTCIP. Please remove the NTCIP ACAP after upgrading to AXIS OS 10.7 or higher and enable NTCIP from Plain Config -> SNMP. 10.7.0:F7 Extended the 802.1x EAP-Identity field character limit from 32 to 128 characters. 10.7.0:F8 Added optional API status property in VAPIX API Discovery JSON response body. 10.7.0:F9 Updated Apache to version 2.4.48 to increase overall cybersecurity level. 10.7.0:F10 Updated OpenSSL to version 1.1.1l to increase overall minimum cybersecurity level. 10.7.0:F11 Updated Video Motion Detection to version 4.5.1. Fixed a streaming issue on configuration web page on some products. 10.6.9:F1 Added parameter “Locked Focus Presets” in plain config that saves new auto focus presets with fixed focus. 10.6.9:F2 Added parameter "Set preset trigger focus" in plain config that opens the iris and does a re-focus when a new preset it set. 10.6.5:F1 Support for a new hardware has been added in release 10.6.5. Products with HardwareID 917, 918, 914, 915 and 916 only support firmware 10.6.5 and later, or 9.80.3.4 and later on LTS 2020. Products with HardwareID 7D9, 7DA, 7B0, 7B1 and 7FA support all firmware versions. The Hardware ID can be found in Plain config -> Properties -> System -> HardwareID For more information, see https://www.axis.com/support/faq/FAQ116555 10.6.0:F1 Axis Object Analytics 1.0.22 is preinstalled. 10.6.0:F2 MQTT subscription support added. With this support, it will be possible to use incoming MQTT messages as action triggers in the rule engine. 10.6.0:F3 Added object classifications in metadata stream when Axis Object Analytics ACAP is running. If the ACAP is restarted for any reason, the metadata stream also needs to be restarted. 10.6.0:F4 Removed support for stream specific legacy overlays. The URL options for legacy image and legacy text overlay will not be supported any more. 10.6.0:F5 Added the possibility to show Day night Information switch in overlay text by using #dn. This will show both the current value and the threshold value for the day/night change. 10.6.0:F6 Added option to select which overlay should be used in a stream profile. 10.6.0:F7 Added "Audio clip playing" as a new condition in event system. 10.6.0:F8 HTTPS Ciphers are checked and unsupported ciphers removed on standard firmware upgrade 10.6.0:F9 Added a parameter to disable Apache & OpenSSL version in HTTP(S) responses in Plain Config -> System. 10.6.0:F10 Upgraded OpenSSL to 1.1.1k to increase overall minimum cyber security level. 10.6.0:F11 Updated Video Motion Detection to version 4.5.0. 10.6.0:F12 Added support for ONVIF profile M 10.6.0:F13 Support of stream specific legacy overlay is removed on Artpec platform. With this change, the URL option for both legacy image and text overlay will not be supported any more on Artpec platform. 10.5.0:F1 Axis Object Analytics 1.0.20 is preinstalled. 10.5.0:F2 RTSP and HTTP stream URL:s now allow for filtering overlays based on overlay type. This is done by setting 'overlays=' in the URL (only one value). 10.5.0:F3 Added support for Day-night shift in On Screen Control 10.5.0:F4 Added support for Defog and ImageStabilization in On Screen Control. 10.5.0:F5 Added an option to manually re-calibrate focus. Please do not re-calibrate until you have read the instructions related to this available here: axis.com/files/manuals/Re-calibrationQ6074_6075.pdf 10.5.0:F6 Added One Shot Auto Focus. To set, go to Settings -> System -> Plain config -> PTZ. Scroll down to UserAdv U1 and tick the check box One shot AF. Scroll down to the end of the page and click the Save button. 10.5.0:F7 OpenSSL upgraded to 1.1.1j to fix CVE-2021-23841 and CVE-2021-23840. 10.4.5:F1 Axis Object Analytics 1.0.19 is preinstalled. 10.4.0:F1 Axis Object Analytics 1.0.18 is preinstalled. 10.4.0:F2 Added support for new action "Publish MQTT", available in the web-interface in Events -> Device events -> Rules setup. This new action allows to publish MQTT messages with custom topic and payload. 10.4.0:F3 Added actions "Play audio clip while active" and "Stop playing audio clip" to the event system. 10.4.0:F4 Successful and failed user login attempts are now logged in detail when the Access Log parameter is enabled from Plain Config -> System -> Access Log 10.4.0:F5 OpenSSL upgraded to 1.1.1i to fix CVE-2020-1971. 10.3.2:F1 Axis Object Analytics 1.0.17 is preinstalled. 10.3.2:F2 Added support for audit logging when a user exports video from the device's edge recording (SD card, network share). 10.3.2:F3 MQTT is now activated by default upon power loss or reboot if MQTT was enabled prior to it. 10.3.2:F4 Trigger Data functionality has been removed. Support for Trigger Data will continue on 9.80 LTS. 10.3.2:F5 Added possibility to set a wear level for the SD card that the event system can trigger on. This is set in the Storage page. 10.3.2:F6 SD card wear level is now displayed on the Storage page if the SD card supports this feature. 10.3.2:F7 Updated OpenSSL to version 1.1.1h to increase overall minimum cyber security level. 10.3.2:F8 Updated Video Motion Detection to version 4.4.9. 10.3.2:F9 Updated Motion Guard to version 2.2.8. 10.3.2:F10 Updated Fence Guard to version 2.2.8. 10.3.2:F11 Updated Loitering Guard to version 2.2.8. 10.2.0:F1 Axis Object Analytics 1.0.15 is preinstalled. 10.2.0:F2 Updated Apache to version 2.4.46 to increase overall cyber security level. 10.2.0:F3 The AXIS Internet Dynamic DNS functionality has been removed. 10.2.0:F4 Removed feature NAT Traversal from UPnP. 10.2.0:F5 Added new events for supervising the digital audio input. 10.2.0:F6 Removed the record/play.cgi API. 10.1.0:F1 Axis Object Analytics 1.0.8 beta is preinstalled. 10.1.0:F2 The parameters Time.ServerTime and Time.ServerDate that have been deprecated for some time are now removed. 10.1.0:F3 Added support for certificate-based client authentication in MQTT. 10.1.0:F4 Added support for Remote Syslog API which enables Axis devices to send their log messages to a remote syslog server. Remote Syslog can be configured via web- interface under Settings -> System -> TCP/IP or using the VAPIX API that can be found here -> https://www.axis.com/vapix-library/. 10.1.0:F5 A factory default is now mandatory when trying to downgrade the device. 10.1.0:F6 Improved performance when building up an RTSP video stream by 30%. 10.1.0:F7 Added support for a new overlay modifier "%v" that displays seconds in 1/1000 fractions. 10.1.0:F8 Added support for HTTP Strict Transport Security (HSTS) when using HTTPS. 10.1.0:F9 The following HTTP headers are now configured per default to increase overall cybersecurity level : X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block. 10.1.0:F10 Updates UPnP to version 1.8.7 which patches CVE-2020-12695 (Callstranger). 10.1.0:F11 Added support for IEEE 802.1x-2010 which provides support for EAPoL version 3. 10.1.0:F12 Changed default IEEE 802.1x EAPoL settting from version 1 to 3. 10.1.0:F13 Added support for configuring 802.1X without CA certificate. This will make the device authenticate on any network, not just the trusted one. 10.1.0:F14 The EAP-TLS-identity field in the 802.1x configuration is now by default filled with "axis-" value. 10.1.0:F15 Updated Video Motion Detection to version 4.4.8. 10.1.0:F16 Updated Motion Guard to version 2.2.7. 10.1.0:F17 Updated Loitering Guard to version 2.2.7. 10.1.0:F18 Updated Fence Guard to version 2.2.7. 10.1.0:F19 Removed the download.cgi API. The exportrecording.cgi API which was introduced in 5.60 is the substitute. 10.0.0:F1 Added support for using mp3 audio clips. 10.0.0:F2 Added VAPIX API for enabling/disabling all privacy masks. 10.0.0:F3 Administrator credentials are now required to access privacymask.cgi. 10.0.0:F4 Added possibility to retrieve the device Owner Authentication Key (OAK) in the web GUI. Note that this functionality requires that the product have direct access to the internet. 10.0.0:F5 Updated Apache to version 2.4.43 to increase overall cyber security level. 10.0.0:F6 Updated OpenSSL to version 1.1.1g to increase overall minimum cyber security level. Corrections in 10.7.3 ================================================================================ 10.7.3:C1 Improved streaming stability for devices used in Axis Companion systems. Corrections in 10.7.1 ================================================================================ 10.7.1:C1 Corrected a network issue that on rare occasions could cause the product to lose its internet-connection. 10.7.0:C1 Corrected CVE-2021-31986. 10.7.0:C2 Corrected CVE-2021-31988. 10.7.0:C3 Corrected an issue that prevented legacy motion detection from working. 10.7.0:C4 Corrected an issue with MQTT subscriptions when reconnecting. 10.7.0:C5 Corrected MQTT default message so it no longer starts with an empty string. 10.7.0:C6 Masks created in the digital zoom range before upgrade, might not cover the same exact area after upgrade.Masks scaled differently in the digital zoom range. If masks were created in the digital zoom range before upgrade, they might not cover the exact same area, since this correction affects the size of the mask in the digital zoom range. 10.7.0:C7 Corrected an issue that caused the "Anonymous viewer" functionality to be removed after upgrade to 10.6.0. 10.7.0:C8 Corrected an issue that interrupted the NTP-time-sync between the Axis device and NTP-server when the NTP-server was operating instable and suffered fluctuating time-changes. 10.7.0:C9 Audio now uses the new audiodevicecontrol.cgi instead of the old API. This means that the gain values may be different in the GUI, but the actual audio level should be the same as before. 10.7.0:C10 Corrected an issue that prevented the Sound Intelligence Sound Detector ACAP to get an audio stream. 10.7.0:C11 Improved RTP timestamp accuracy for metadata streams. 10.7.0:C12 Corrected an issue that could cause an RTSP stream to stop after 60+ seconds if streamed to an openRTSP client. 10.6.7:C1 Corrected an issue with MQTT subscriptions when reconnecting. 10.6.7:C2 General improvements in streaming management. 10.6.2:C1 General improvements in streaming management. 10.6.0:C1 Improved Motion Detection to handle scenes with extreme lighting changes , improving general behavior for applications that make use of this engine and data. 10.6.0:C2 Improved behavior when using Guard Tour with the Control Queue. 10.6.0:C3 Corrected an issue that did not account for MTU packet fragmentation for IEEE 802.1x authentication. Previously the Axis device was not able to authenticate properly against an 802.1x network when the MTU was configured to 1410 or lower. 10.6.0:C4 Corrected an issue that on some occasions could prevent export of a part of a recording. 10.6.0:C5 Corrected an issue that in combination with some VMSes and low resolution could cause brief disconnections in the video stream. 10.5.2:C1 Corrected an issue that on some occasions prevented an upgrade to firmware version 10.5.0. 10.5.2:C2 Corrected an issue that caused already established secure connections such as HTTPS or One-Click Cloud Connections to be interrupted. 10.5.2:C3 Corrected an issue that could cause O3C-based connections with the device to be interrupted. 10.5.0:C1 Increased the number of allowed characters for event condition name to 512. 10.5.0:C2 Corrected an issue that prevented the use of some special characters in ONVIF passwords. 10.5.0:C3 Corrected an issue that prevented the Axis device to respond with HTTP 403 Forbidden when the source-ip address was blocked when using PreventDOSAttack in Plain Config -> System. Previously HTTP 401 Unauthorized was returned. 10.4.5:C1 Corrected an AXIS Object Analytics configuration issue that occurred while using HTTPS. 10.4.0:C1 Corrected an issue that erased the password from the MQTT broker connection settings when editing settings occasionally. This required the user to re-enter the password when this happened. 10.4.0:C2 Corrected an issue that caused the MQTT configuration in the device to get corrupt on rare occasions. 10.4.0:C3 Corrected an issue that could caused an MQTT event to be duplicated upon registering the same event multiple times. 10.4.0:C4 Updated digital input LogicalState metadata API to consistently use 0/1 on all camera models. 10.4.0:C5 Corrected an issue that caused the device to send an EPRT command when transferring an image or video via FTP instead of an EPSV command. 10.4.0:C6 Corrected an issue where a network share used as a recipient could get its properties overwritten by another network share created from the Storage page. 10.4.0:C7 Corrected an issue that required the user to re-enter the password for the user for the MQTT broker connection upon changing other MQTT settings. 10.4.0:C8 Corrected nice names for the PreventDoSAttack parameters in Settings -> System -> Plain Config-> System -> PreventDoSAttack. 10.4.0:C9 Improved Link Layer Discovery Protocol (LLDP) system stability. 10.4.0:C10 Corrected response for NTP API version. 10.3.2:C1 Improved manual focus adjustment 10.3.2:C2 Corrected an issue that caused video clients to not display a low-FPS video stream due to missing base FPS info in VUI timing info. 10.3.2:C3 Corrected an issue that prevented setting the gain individually on the left and right channel on products with stereo audio input. 10.3.2:C4 Corrected an issue that caused PKCS#12-formatted certificate uploads to fail when certain special characters were used as a password. 10.3.2:C5 Corrected text for time offset in the Date & Time web page, the offset is now shown in milliseconds instead of seconds. 10.3.2:C6 Corrected an issue with pause-frame handling that could cause network disconnections if pause-frames were enabled and used in the network. 10.3.2:C7 Corrected an issue that prevented the device to utilize the available network bandwidth in high-latency networks such as 4G cellular network. 10.3.2:C8 Corrected an issue that caused the audio transfer over HTTPS to not work properly and with that, the audio-gain-level behavior was also reverted back to the state it was known in AXIS OS releases up to AXIS OS 10.0.2. It is therefore mandatory to upgrade to AXIS OS 10.3 when experiencing audio-related issues on Axis devices running on AXIS OS 10.1 and 10.2. Upon release of AXIS OS 10.3, AXIS OS 10.1 and 10.2 will be made unavailable for download from www.axis.com moving forward. 10.3.2:C9 Improved video streaming stability in multi-stream- and ONVIF Audio Backchannel scenarios. 10.3.2:C10 Corrected an issue that caused the value of Quality of Service (QoS) to not be respected in always multicast mode. 10.3.2:C11 Corrected an issue that prevented the device to stream in always-multicast mode after the video stream processing has been restarted. 10.2.0:C1 Corrected an issue that caused an error message to pop-up when pressing the test button of an event using HTTP recipients. 10.2.0:C2 Corrected an issue that caused the 'last will & testament' message not to work. Therefore, the default behavior for connect, disconnect and 'last will & testament' messages have been modified. By default a common topic, {device serial number}/event/connection, and a common payload structure will be used for such messages. 10.2.0:C3 Corrected an issue that caused a hard factory default even though a soft factory default was requested when upgrading the firmware via VAPIX. 10.2.0:C4 Corrected an issue that caused parallel HTTPS cgi requests to fail on rare occasions. 10.2.0:C5 Corrected an issue that sometimes could make it impossible to export the full length of recordings. 10.2.0:C6 Corrected an issue that caused the device to stop video streaming over multicast after receiving multiple RTSP PLAY requests with "npt=0.000-" payload. 10.1.2:C1 Improved manual focus behaviour. 10.1.0:C1 Corrected an issue that caused an FTP Send Image action rule to use the temporary mode option even if the option was not enabled. 10.1.0:C2 On upgrade to 10.1 the web browser cache needs to be reset or the configuration page for VMD and/or Guard Suite ACAPs will show up as a blank screen. 10.1.0:C3 Corrected an issue that caused old recordings to not be removed after their retention period was expired. 10.0.2:C1 Corrected an issue that sometimes caused event triggered recordings to fail. 10.0.0:C1 Corrected an issue that sometimes could cause problems with edge sync between camera and Genetec VMS. 10.0.0:C2 Corrected an issue that prevented cross device triggering to work properly when IPv6 was used. 10.0.0:C3 Corrected an issue that sometimes made it impossible to edit action rules after upgrade. Known Bugs/Limitations ================================================================================ Supported AXIS VAPIX API Image Resolutions for Q6075 ================================================================================ Resolution Exceptions ------------ ------------ 1920x1080 1280x720 800x450 480x270 320x180 1280x960 1) 1024x768 1) 1024x576 1) 800x600 1) 768x576 1) 720x576 1) 704x576 1) 704x480 1) 704x288 1) 704x240 1) 640x480 1) 640x360 1) 480x360 1) 384x288 1) 352x288 1) 352x240 1) 320x240 1) 240x180 1) 192x144 1) 176x144 1) 176x120 1) 160x120 1) 160x90 1) analyze 1) 1) Not visible in web user interface